$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383038.roa File: 3232332e3230322e3133312e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: kYq4ZfoglITVBAqFNnU3OM3QivReKGP07dHNNmkmsm4= Subject key identifier: 67:55:94:07:B0:5A:E1:EB:0F:49:1A:69:15:B6:5C:4F:92:31:21:E5 Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 0E957022E6C3B9AF8798919071D44BFBDD00EB0A Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383038.roa Signing time: Tue 19 May 2026 02:29:57 +0000 ROA not before: Tue 19 May 2026 02:24:57 +0000 ROA not after: Tue 18 May 2027 02:29:57 +0000 asID: 4808 IP address blocks: 223.202.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:95:70:22:e6:c3:b9:af:87:98:91:90:71:d4:4b:fb:dd:00:eb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 02:24:57 2026 GMT Not After : May 18 02:29:57 2027 GMT Subject: CN=67559407B05AE1EB0F491A6915B65C4F923121E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:e9:5f:fd:4c:a9:37:eb:71:a6:dd:ac:c1: 41:e2:c2:81:bb:cd:7b:27:6a:80:58:e4:1c:51:e6: 6b:17:64:a1:33:8a:1f:7b:f3:55:1e:7d:9f:43:cc: b9:1c:0b:38:0c:dd:4a:6a:a5:4b:7a:cb:15:a6:94: 71:d1:22:84:be:e3:2e:79:f3:cb:c4:34:bc:a6:fe: 13:5c:c9:0f:4b:d6:f6:0b:1c:0c:24:75:d3:fe:bc: c2:f3:64:93:67:46:2a:15:bc:78:5c:93:3b:eb:77: cd:e6:a2:ce:48:b1:25:b8:cd:6e:e0:e2:fb:ea:86: 61:75:6c:27:90:50:d7:6a:15:b6:e7:b6:bc:ad:77: 33:51:9a:01:7a:d7:ab:4c:59:ca:bb:fe:78:7f:72: 3a:47:8b:ab:a7:72:a4:8f:55:a9:97:65:22:36:3b: 4f:71:8b:c7:d5:7e:24:06:14:77:99:12:ba:52:46: c4:a8:c1:a0:0e:f0:ce:ee:ef:a3:4f:af:cb:bf:d7: fe:a3:b7:e9:29:bf:0b:55:d6:0e:32:15:33:79:b7: a4:ef:71:1f:b8:82:50:5a:92:27:5f:bf:59:51:38: 5b:5d:3b:c3:d0:55:a9:91:f0:59:35:6c:2b:57:ca: 2d:db:ff:a0:32:52:7e:58:09:cc:f1:ce:f2:09:e4: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:55:94:07:B0:5A:E1:EB:0F:49:1A:69:15:B6:5C:4F:92:31:21:E5 X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.202.131.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f7:83:c2:17:b3:0a:9c:c8:87:f6:cc:c7:11:8f:df:eb:f2: b0:0e:54:1a:72:cb:31:1f:22:22:3b:e6:b1:a2:a5:5d:56:17: 3b:1f:94:7a:d4:76:c5:58:89:e0:cf:63:b8:a4:50:65:fc:a9: 9e:74:cb:c3:ce:61:59:10:af:c4:77:4c:b6:f3:c4:30:f6:fb: d0:6f:36:46:c3:c4:c2:6f:e3:1d:fd:71:6d:9c:27:9e:e8:75: e3:bd:ce:b8:38:4a:d7:3d:eb:4c:3f:47:07:c6:c3:94:63:c2: 4c:41:52:55:91:42:87:d0:a8:db:43:0b:5f:2a:10:89:bd:df: ce:05:83:a6:d5:00:2e:be:ef:fc:df:b7:d8:41:a0:24:e1:aa: 55:51:37:3c:a1:52:7f:ca:2e:8b:73:17:0c:22:c8:28:11:13: 68:1d:17:46:12:0b:75:68:59:29:94:3e:45:ea:2f:1f:2b:fc: 77:e2:08:88:23:85:1b:73:4d:0f:9b:7a:d2:20:01:27:42:30: f5:9d:7f:71:16:e4:b3:d4:43:11:23:2b:df:fc:bc:22:88:6f: 73:94:6f:11:c5:6e:94:32:91:0b:bb:5f:fe:26:b6:68:b7:3c: 49:66:e6:02:ca:da:0a:b6:67:c0:c9:bc:df:59:b9:84:0a:28: a0:75:6d:5c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDpVwIubDua+HmJGQcdRL+90A6wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwMjI0NTdaFw0yNzA1MTgwMjI5NTdaMDMxMTAvBgNV BAMTKDY3NTU5NDA3QjA1QUUxRUIwRjQ5MUE2OTE1QjY1QzRGOTIzMTIxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtq+lf/UypN+txpt2swUHiwoG7 zXsnaoBY5BxR5msXZKEzih9781UefZ9DzLkcCzgM3UpqpUt6yxWmlHHRIoS+4y55 88vENLym/hNcyQ9L1vYLHAwkddP+vMLzZJNnRioVvHhckzvrd83mos5IsSW4zW7g 4vvqhmF1bCeQUNdqFbbntrytdzNRmgF616tMWcq7/nh/cjpHi6uncqSPVamXZSI2 O09xi8fVfiQGFHeZErpSRsSowaAO8M7u76NPr8u/1/6jt+kpvwtV1g4yFTN5t6Tv cR+4glBakidfv1lROFtdO8PQVamR8Fk1bCtXyi3b/6AyUn5YCczxzvIJ5FNPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZ1WUB7Ba4esPSRppFbZcT5IxIeUwHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA1NTM5NjA0MTg1MDg4MS8wLzMyMzIzMzJlMzIz MDMyMmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN/KgzANBgkqhkiG9w0BAQsFAAOCAQEAAPeDwhezCpzIh/bMxxGP3+vy sA5UGnLLMR8iIjvmsaKlXVYXOx+UetR2xViJ4M9juKRQZfypnnTLw85hWRCvxHdM tvPEMPb70G82RsPEwm/jHf1xbZwnnuh1473OuDhK1z3rTD9HB8bDlGPCTEFSVZFC h9Co20MLXyoQib3fzgWDptUALr7v/N+32EGgJOGqVVE3PKFSf8oui3MXDCLIKBET aB0XRhILdWhZKZQ+ReovHyv8d+IIiCOFG3NND5t60iABJ0Iw9Z1/cRbks9RDESMr 3/y8Iohvc5RvEcVulDKRC7tf/ia2aLc8SWbmAsraCrZnwMm831m5hAoooHVtXA== -----END CERTIFICATE-----Generated at Fri May 29 22:57:25 2026 by rpki-client